hmm... does seem like an added profile field (classic or threads) could be used to allow/disallow access to a private forum wherein a "members area" could be stashed
With threads they could be given access to a member's group with access to the area.
With threads an attachment wouldn't have a directly linkable link, tho I'm sure some experienced people could figure it out